How we protect your child's data

What we ask for

For a personalized story, only these:

• A first name — so the story can be theirs.
• An age — or, if you prefer, a birth month and year, so stories keep pace as your child grows. We never ask for the exact day of birth.
• Interests — dinosaurs, the moon, whatever they love this week.
• Optionally, a line about what happened today — always your words, only if you offer them.
• Optionally, voice recordings: yours, or those of someone you invite to read a night. They stay in private storage for your family.

That's the whole list. No last names, no photos of your child, no location, no contacts. Your own account is just an email for signing in.

How it's stored

The most personal fields (your child's name, interests and birthday, and the characters, places and moments of your story worlds) are encrypted with Storie's own key, separate from the database's own safeguards, so a leak of the database alone would not expose them in the clear. The stories themselves, which use your child's first name, and any recordings are protected by the database's and storage's own safeguards, not by this extra key.

If that key is ever unavailable, Storie refuses to save those fields rather than store them without it.

Keepsake pictures live in private storage that isn't publicly reachable. They're shown only to your signed-in account — or on a story's public page, if you yourself chose to share that story.

Who else touches this data

Four companies outside Storie see story content. We name them plainly, and each receives only what its job needs:

• Anthropic: writes the stories. It receives what you type for a story: the first name, age, interests, and your note about today.
• OpenAI: creates keepsake pictures and reads stories aloud in the standard voice. For a picture it receives only a short scene description that we scrub of names first — never your child's details. For narration it receives the story text.
• ElevenLabs: provides the optional narrated voice. It receives the story text and nothing else.
• Braintrust: checks story quality. It receives each story request and the story written, with email addresses and phone numbers removed first. Your child's first name and the story text are not removed. The logs are not tied to your account.

We never use your family's data to train AI models. What we send these companies, we send to make your story and check its quality, nothing else.

Behind the scenes we also use Clerk (sign-in), Supabase (database), Stripe (payments), Vercel (hosting), Resend (emails, such as a gift code), and Apple (purchases in the iPhone app). The full list lives in our privacy policy.

If you share a story

Every story is private until you choose otherwise. Tapping share makes that one story readable by anyone who has its link.

One thing to know before you share: the story's text usually weaves your child's first name into the prose — that's part of what makes it theirs — and a shared story shows that text in full. Link previews and the page's metadata never include your child's details, but the story itself does. Share knowingly.

Deleting a story takes its public page down with it.

No ads, no trackers

There are no ads in Storie, and a story will never carry one. We don't sell your data and we don't track you across the web. The only measurement we run on visits is aggregate page analytics from Vercel, our hosting provider, to keep the site quick to load. No ad trackers.

Deleting is real

Delete a reader profile any time — it's removed from your device and from our database, and it stays gone on your next sign-in.

From your account page you can download everything Storie holds about your family in one readable file, or delete all of it: stories, story worlds, profiles, keepsake pictures and recordings. Deleting also cancels any older Storie subscription, and it cannot be undone.

Questions?

If anything here is unclear, or you'd like to know more before trusting us with a name, write to us at privacy@immanence.inc